topic Re: High Availability on Public Cloud in VM-Series in the Public Cloud

High Availability on Public Cloud

Mitesh_Nandu — Thu, 10 Nov 2022 11:29:38 GMT

Hi,

Does any one has implemented Palo Alto NGFW in HA on GCP.

If yes, than what will be the requirement for the same.

Re: High Availability on Public Cloud

Metgatz — Fri, 11 Nov 2022 03:21:14 GMT

Hello @Mitesh_Nandu

Personaly I dont deploy HA in GCP.

I personally have not deployed Palo Alto in HA in GCP.

I understand that it is not supported for GCP, at least in a traditional way.

Check this Links:

https://docs.paloaltonetworks.com/vm-series/9-0/vm-series-deployment/about-the-vm-series-firewall/vm-series-in-high-availability#:~:text=AZURE-,GCP,-Active/Passive%20HA

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000PP9zCAG

https://docs.paloaltonetworks.com/vm-series/9-1/vm-series-deployment/set-up-the-vm-series-firewall-on-google-cloud-platform/supported-deployments-on-google-cloud-platform

Cheers

Re: High Availability on Public Cloud

Mitesh_Nandu — Mon, 14 Nov 2022 04:29:37 GMT

Hi Metgatz,

Thanks for the reply.

In newer version of PANOS 10.X HA1 & HA2 is supported on GCP, document which you referencing is old one.

https://docs.paloaltonetworks.com/vm-series/10-2/vm-series-deployment/about-the-vm-series-firewall/vm-series-in-high-availability

Me not getting any documentation or any reference article, about how to configure HA1 & HA2 on GCP & what will be requirement for the same.

Re: High Availability on Public Cloud

Metgatz — Mon, 14 Nov 2022 04:37:51 GMT

Hello, thanks for the information, good to know.

So if it is supported, then it should not be that different from any other HA Active Passive VM type requirement, just in GCP environment.

Best regards

Re: High Availability on Public Cloud

Mitesh_Nandu — Mon, 14 Nov 2022 04:40:53 GMT

Hi Metgatz,,

If you have document can you please share with me.

Re: High Availability on Public Cloud

Metgatz — Mon, 14 Nov 2022 04:52:33 GMT

Hello @Mitesh_Nandu

Review carefull the doc say clarify HA Active Passive - HA Active / Active NO, for both modes.

https://docs.paloaltonetworks.com/vm-series/10-2/vm-series-deployment/about-the-vm-series-firewall/vm-series-in-high-availability#:~:text=AZURE-,GCP,-OCI

Best regards

Re: High Availability on Public Cloud

Mitesh_Nandu — Mon, 14 Nov 2022 04:59:00 GMT

Hi Metgatz,

Yes, document say HA A/P & HA A/A not supported.

How to configure HA1 & HA2 (Session Synchronization & Keep alive session) ?

Me little confuse here document says A/P HA not possible & it say we can setup Session Synchronization & Keep

alive session.

Can you please clarify the same.

Re: High Availability on Public Cloud

mmclimans — Thu, 11 Jan 2024 16:12:50 GMT

Hi Mitesh,

Active/Passive is now supported for VM-Series on GCP. Here is Terraform build that walks through the deployment.